Volatile Cedar
No sourced public emblem in this profile.
reference profile · reported nexus: LB (not nationality)
Beginning in late 2012, a carefully orchestrated attack campaign we call Volatile Cedar has been targeting individuals, companies and institutions worldwide. This campaign, led by a persistent attacker group, has successfully penetrated a large number of targets using various attack techniques, and specifically, a custom-made malware implant codenamed Explosive.
Source-reported aliases: Lebanese Cedar, DeftTorero. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): No country-level metadata
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://blog.checkpoint.com/2015/03/31/volatilecedar/
https://blog.checkpoint.com/2015/06/09/new-data-volatile-cedar/
https://securelist.com/sinkholing-volatile-cedar-dga-infrastructure/69421/
https://www.clearskysec.com/wp-content/uploads/2021/01/Lebanese-Cedar-APT.pdf
https://securelist.com/defttorero-tactics-techniques-and-procedures/107610/